79961

SYS and SYSTEM Users

The following administrative user accounts are automatically created when you install Oracle Database. They are both created with the password that you supplied upon installation, and they are both automatically granted the DBA role.

■SYS

This account can perlonu all administrative lunetions. Ali basc (underlying) tablcs and views for the database data dictionary are stored in the SYS schema. These base tablcs and views are critical for the operation of Oracle Database. To maintain the integrity of the data dictionary. tablcs in the SYS schema are manipulated only by the database. They should never be modified by any user or database administrator. You must not create any tables in the SYS schema.

DBA Enables a user to perform most administrative functions. including creating users and granting privileges; creating and granting roles: creating. modifying. and deleting schema objects in any schema: and more. It grants all system privileges. but does not include the privileges to start or shut down the database instance. It is by default granted to users SYS and SYSTEM.

See ALso:

■ "Administcring Roles" on page 7-6 ■"Administering Database User Accounts" on page 7-8 ■Chapter 8. "Managing Schema Objects"

mOracie Database 2 Day + Security Guide for morę information about privileges and roles

mOracle Database SQL Language Reference for tables of system

privileges. object prwileges, and predefined roles

mOracle Database Concepts for an overview of database security

Role Name Description

About Administratrve Accounts and Privileges

Administering User Accounts and Security 7-5

The SYS user is granted the SYSDBA privilcge, which enables a user to perform high-level administrative tasks such as backup and recovery.

■SYSTEM

This account can perform all administrativc functions except the following:

-    Backup and rccovcry

—    Database upgradc

While this account can be used to perform day-to-day administrativc tasks. Oracle strongly recommends creating named users account for administering the Oracle database to enable monitoring of database activity.